mirror of
https://github.com/isc-projects/bind9.git
synced 2026-06-11 12:50:00 -04:00
- added a call to dns_dnssec_verify
- swapped ISC_R_SUCCESS/DNS_R_CONTINUE in two places - hitting the end of the list of SIGs without a verification is not success.
This commit is contained in:
parent
587922e6d1
commit
0a3e2e1d59
1 changed files with 7 additions and 4 deletions
|
|
@ -338,15 +338,18 @@ validate(dns_validator_t *val, isc_boolean_t resume) {
|
|||
|
||||
if (!resume) {
|
||||
result = get_key(val, &siginfo);
|
||||
if (result != DNS_R_CONTINUE)
|
||||
if (result != ISC_R_SUCCESS)
|
||||
return (result);
|
||||
}
|
||||
INSIST(val->key != NULL);
|
||||
|
||||
result = dns_dnssec_verify(event->name, event->rdataset,
|
||||
val->key, val->view->mctx, &rdata);
|
||||
if (result == ISC_R_SUCCESS)
|
||||
return (result);
|
||||
|
||||
result = dns_rdataset_next(event->sigrdataset);
|
||||
} while (result == ISC_R_SUCCESS);
|
||||
if (result == ISC_R_NOMORE)
|
||||
result = ISC_R_SUCCESS;
|
||||
|
||||
return (result);
|
||||
}
|
||||
|
|
@ -371,7 +374,7 @@ validator_start(dns_validator_t *val) {
|
|||
result = DNS_R_NOTIMPLEMENTED;
|
||||
}
|
||||
|
||||
if (result != ISC_R_SUCCESS)
|
||||
if (result != DNS_R_CONTINUE)
|
||||
validator_done(val, result);
|
||||
|
||||
UNLOCK(&val->lock);
|
||||
|
|
|
|||
Loading…
Reference in a new issue